Auto Script which creates SAP Account when AD gets created.

Hello Experts - Requirement is "Create SAP User account automatically when AD account gets created", can I acheive this through ECATT scripts?
If this is possible, idea is to create an ECATT script and schedule it to run every night to find all new users on AD and create their account on SAP and lock their accounts.
Do you think this can be acheived thru ECATT's?
If not ECATT, is there any way out to acheive my objective. We are planning to reduce overhead for SAP User admins, I was thinking on following steps:
1) New User request for AD
2) After approval create AD account
3) Design a scrip, which will look for all new users on AD and will create & lock them on SAP (Nightly Job or something)
Your thoughts?
Your suggestions are much appreciated.
Thanks.

Hi Martin,
I have a customer with 16 million users in SU01. They don't use IdM and don't need it either at the moment.
I have another customer with 700 users and they are implementing IdM because it makes sense. They need it to reduce complexity.
There are no IdM license costs, unless you provision non-SAP systems.
You can skip GRC by using a well designed concept for report RSUSR008_009_NEW if it meets your requirements - particularly the number of systems. It does however have it's limits (per ABAP client) and is not user friendly at first. Also no nice pie-charts for managers, etc.
Emergency User Access comes in many shapes and sizes... SAP declined a development suggestion from me to improve the "FireFighter" tool so I developed it on my own for my customers using BAPIs and they are happy. The main requiremenent not fullfilled is that the user context changes so that you loose access to HR data, queries, variants, workflow items, purchase orders, etc. The FireFighter users also become obvious targets of attacks and the application users (dialog) need authority to change the FireFighter's passwords to use the application  - which means that they can use RFC to do the same without using the FireFighter transactions / logs / etc.
Regarding other IdMs, I have experience with some, but documented here on SDN is only the password syncronization problems which Novell suffers from. These "problems" are intentional - or better said --> their own fault for using "hacks"...
If you search for "Novell" you will find them.
Cheers,
Julius

Similar Messages

  • Error in script which create a table!

    i publish a cript which create a table.
    at the first sync,the table is created and everything is ok.
    however,at the second sync,the error appear and the sync stoped!
    i have to delete the table created by the script and re-sync ,it's ok!
    it seems that the script run when sync even though it's not the first sync!
    what's the matter??
    every help is welcome!!

    i want to create table in olite db in the client,but not by msql.
    as i have said,i want to create table by publish the ddl script!
    but there is some errors appear !
    thank you for you response!

  • Auto charged money from my account when i"m not buy anything??

    HI Apple,
    Please double check for me why Itunes auto charged money from my account? when I didn't buy any thing from last 2 day? I think that wrong,because i never buy music from itunes. If every day I check my account form bank see my money all gone I will be upset.Please help me to double check again.
    Best Regards,
    Tra-My NGUYEN

    I have the same question. My credit card is charged every few days for varying amounts and I did not purchase anything from iTunes. My credit card bill says Apple ITunes but no other detail is provided to inform me what the charge is for.

  • Have two different iPhones on same account, when I get an app it goes to my spouses phone too. We also have each others contacts. How do we fix this?

    My husband and both have iPhones on the same Apple ID. Do we need to have two separate accounts because when I purchase an app he gets it on his phone? Also all my contacts are coming up under his contacts now. Not sure how to fix this. I wanted to add my email but am afraid to do so in case it comes up on his phone. Any suggestions?

    Go to settings-store-and turn off automatic downloads.  Then go to settings-icloud or settings-mail contacts and calendar (which ever one shares an account between the devices) and turn off contact syncing on the phone that you dont want it to sync to.

  • How can I set Messages to log into my account when I launch it.

    I find it inconvenient to have to have to switch from offline to available each time I start up Messages. Is there a way to auto login in to an account when I start up Messages.

    Hi.
    gail from maine may have part of the answer but I an not sure it is all of it.
    It seems you are talking about other accounts rather than the iMessages account as the iMessages account is not affected by the "when I Quit..." setting.
    This means it should  be AIM, Jabber or Yahoo types.
    I would start by using the option in the General Section to Unlink multiple Buddy lists if you use them.
    Under the Text Resizing slider is Buddy List stuff starting with Show All Buddy list in one List which is ticked (Enabled) by default.
    This should show you the Buddy List as separate windows.  (they are also listed in the Window Menu as separate items).
    At the top left of each Buddy List is your Name (or Handle/ID for that Account) pulled from the Contact App  > My Card.
    Below that is the Current Status.
    If you click this it shows the current Saved Status Messages (including the built in ones) and the iTunes Playing option.
    At the bottom you can set to have All Buddy List show the same Message.
    As you can see there is an Off Line option.
    It should remember any Changes you make.  If it is not it will return to the last setting.
    If this is happening you will have lost Permissions to Write to the .plist involved.
    Lets us know what is happening with this before we explain how to sort this.
    It is getting late where I am and there will be some time (and some drink) before I am bac.
    9:42 pm      Wednesday; December 31, 2014
    ​  iMac 2.5Ghz i5 2011 (Mavericks 10.9)
     G4/1GhzDual MDD (Leopard 10.5.8)
     MacBookPro 2Gb (Snow Leopard 10.6.8)
     Mac OS X (10.6.8),
     Couple of iPhones and an iPad

  • Powershell Script to create "custom" Document Library

    I have a powershell script which creates a Document Library for every user in AD.
    This works, but rather than using the default Document Library I want it use a custom Document Library.  However this isnt working.
    My script to create the default Document Library is this...
    [System.Reflection.Assembly]::Load("Microsoft.SharePoint, Version=12.0.0.0, Culture=neutral, PublicKeyToken=71e9bce111e9429c")
    $site = new-object Microsoft.SharePoint.SPSite("http://servername/sitename");
    $siteweb = $site.OpenWeb();
    $webs = $siteweb.Webs;
    $strFilter = "(&(objectCategory=User)(name=accountname))"
    $objDomain = New-Object System.DirectoryServices.DirectoryEntry
    $objSearcher = New-Object System.DirectoryServices.DirectorySearcher
    $objSearcher.SearchRoot = $objDomain
    $objSearcher.PageSize = 1000
    $objSearcher.Filter = $strFilter
    $objSearcher.SearchScope = "Subtree"
    $colProplist = "samaccountname"
    foreach ($i in $colPropList){$objSearcher.PropertiesToLoad.Add($i)}
    $colResults = $objSearcher.FindAll()
    foreach ($objResult in $colResults)
    $objItem = $objResult.Properties; $objItem.samaccountname
    $listTemplate = [Microsoft.SharePoint.SPListTemplateType]::DocumentLibrary
    $listId = $siteweb.Lists.Add($objItem.samaccountname, "", $listtemplate);
    $list = $siteweb.Lists.GetList($listId, $true);
    $roleDef = $siteweb.RoleDefinitions.GetByType("Contributor");
    $user = "domain\" + $objItem.samaccountname;
    $rolAssign = new-object Microsoft.SharePoint.SPRoleAssignment($user, "email", "name", "notes");
    $rolAssign.RoleDefinitionBindings.Add($roleDef);
    if(!$list.HasUniqueRoleAssignments)
    {$list.BreakRoleInheritance($true);}
    for ($i = $list.roleAssignments.Count - 1; $i -gt -1; $i--)
    { $list.RoleAssignments.Remove($i) }
    $list.RoleAssignments.Add($rolAssign);
    $list.Update();
    Now I have a custom Document Library named "TESTLIB" so if I substitute the line:
    $listTemplate = [Microsoft.SharePoint.SPListTemplateType]::DocumentLibrary
    with
    $listTemplate = [Microsoft.SharePoint.SPListTemplateType]::TESTLIB
    Then it errors with this...
    How can I script powershell to create a "custom" Document Library?
    Thanks

    The below link should help you in creating custom document library using powershell
    http://blogs.technet.com/b/heyscriptingguy/archive/2010/09/23/use-powershell-cmdlets-to-manage-sharepoint-document-libraries.aspx
    Vinod H
    Thanks for the link but I cant see anything to assist creating a custom library?  Was there something in paticular you saw?

  • HT4889 I have accidentally created another account when using Migration Assistant to a new MBA. How do I now 'migrate' all the files from both accounts into one to save myself having two accounts, both of which are me? Help?

    I have accidentally created another account when using Migration Assistant to a new MBA. I have read that I probably should not have skipped migration in the initial set up and the problem would have been avoided but, alas, here I am. Does anyone know how I can 'migrate' all the files from one of the accounts that has been created to the other, so then I can delete it and have a single user on the computer seeing as I am the only person using it? I have read starting again, if this is the way to go, where is the best place to start 'starting again'?

    Yes definitely should see it but its not coming up (I don't think) when I log out of 2nd user and into the main account. Opening finder in the 2nd account, I can obviously find the public folder because thats where I dropped all the files, but when in the main account, it can't be found. The only public folder that comes up is the folder for that account (main account) and it does not display files I'm looking for. Frustrating....
    EDIT: Have found it through a round-about way but all music and photo and movie etc files have a red stop sign disallowing them from being transferred. Can you guess what the next question will be?

  • WHAT ARE THE FORMS (SCRIPTS) WHICH ARE NOT PROVIDED BY STANDARD SAP?

    WHAT ARE THE FORMS (SCRIPTS) WHICH ARE NOT PROVIDED BY STANDARD SAP?

    Hi Pravin
    For a beginner in CRM - Sales would be a right choice to understand how CRM behaves when integrated with backend R/3.
    Still as far as CRM goes, most of the components are not exposed to their fullest potential and that is why its not outshining the competitors in market.

  • How to change account determination in sap asset accounting when there is a

    Dear experts,
    how to change account determination in sap asset accounting when there is a posting in previous one.
    thanks in advance
    Deboleena Ganguly

    HI:
    You can easily change the account determination of asset class . There is an OSS note regarding the correction of issue which you will face while changing account determination for which there are already posted fixed assets
    Error message AC476 upon change of account in AO90  can be customized now
    via transactions OBMSG...Application Area-AC
    Note 202746
    Under certain circumstances, it may still be necessary to make a change
    to this account.By implementing this note, the above error message is
    replaced by a warning message.Following account maintenance, you may
    need to carry out manual intracompany transfers in FI in accordance with
    Note 69225.
    Regards
    Edited by: Atif Farooq on Oct 31, 2011 11:44 AM

  • How do I get rid of the auto signature "sent from my iPhone" when I create a new message?

    how do I get rid of the auto signature "sent from my iPhone" when I create a new message?

    Settings -> Mail -> Signature and edit it to whatever you'd like.

  • Can i use a 2nd iphone if i install itunes on another user account.when i tried to create a second library i messed up both phones, the second one now has all my contacts and when it sends txts it either says its my other phone or email address

    can i use a 2nd iphone if i install itunes on another user account.when i tried to create a second library i messed up both phones, the second one now has all my contacts and when it sends txts it either says its my other phone or email address. i can cope with the first phone and getting it back on itunes but dont want to syn the 2nd phone until i know it is independant of the other one. Does it matter that both phones use the same itunes store account?

    Deleting the account on your phone only removes if from your phone.  The account and it's data remain intact and doing so will not effect your daughter's phone.
    To do this, first go to Settings>iCloud on your phone and turn any synced data (contacts, calendars, etc.) to Off, and when prompted, choose to keep the data on the phone.  When finished, scroll to the bottom and tap Delete Account.  Then set up a new iCloud account with a different Apple ID and turn any data you want to sync with iCloud (contact, calendars, etc.) back to On.  This will upload your data to your new iCloud account.

  • How do I create a new apple store account when my phone tells me that I have exceeded the maximum limit on this phone

    How do I create a new apple store account when my phone tells me that I have exceeded the maximum limit on this phone

    http://support.apple.com/kb/HT4627

  • I created my iTunes account when I was living in Venezuela, but have relocated to the US now.  How do I change my apple store to allow me to download apps that are not available in the store available to Venezuela?

    I created my iTunes account when I was living in Venezuela, but have relocated to the US now.  How do I change my apple store to allow me to download apps that are not available in the store available to Venezuela?
    Sorry for the long 'subject'!  hahaha  I am new to the community.  This should be fun!

    No, What I mean  is, Now I am leaving in USA but every time that I tried to download an app only appear app available in Venezuela no the one available in USA. 
    I already change my address and select USA but still I can not download app for USA

  • Why do I get a prompt to create an iCloud account when I already have one?

    When I try to turn on notes so my iPhone and iPad will sync, I am prompted to create an account when I already have one. Why? How can I do this?

    Have you created an iCloud account?  This is not the account or ID you use for iTunes.  And where exactly are you turning on notes?  In what area within settings of your devices?

  • Which G/L accounts to be created as Cost Elements

    Hi
    I wanted to know which G/L accounts should be created as cost elements since there are some G/L accounts that are usually not created as cost elements. Wats the logic that one needs to keep in mind while creating cost centres?

    Hi,
    G/L accounts are of two types
    1) Profit and loss account
    2) Balance sheet account
    There are two types of cost element
    1) Primary Cost element
    2) Secondary Cost element
    In P&L statement, expenses and revenues are shown.
    Similarly in cost center costs are depicted, maybe departmentwise or product wise, etc..
    So for every P&L account primary cost element is created so that these costs flow to cost center or in other words  it is reflected both in Financial accounting and in Controlling.For secondary cost element you dont require an existing G/L account.
    In short secondary cost element are used for assessment and distribution
    I hope your doubt is cleared
    Asha

Maybe you are looking for

  • I reset Safari and lost my "reopen all windows from last session" windows.

    Is there a way to retrieve those windows after a reset, or from the session before last?  Basically, I had some useful windows open, but don't remember what they all were. 

  • Getting FRM-40105 in the sales order form when applying sales credits

    Hi, i'm trying to apply sales credits at the line level. 1.I get FRM-40105 unable to resolve reference to item SALES_CREDITS while trying to save the data in the sales credits window of the sales order form-OEXOEORD(this happens only if i say save an

  • Blackberry world payment without purchase

    Today as soon as I configured payment option in Blackberry World, Rs. 106.65 was charged to my credit card. I fail to understand reason. Should I dispute the transaction with credit card company? R B Singh

  • Cypress Touchpad - DELL XPS 12

    Hello, I'm owner of a DELL XPS 12 convertable notebook which has as inpunt device an ATMEL maXTouchDigitizer (Touchscreen) and a Cypress touchpad. The touchscreen works like expected, after an installationen of a new Arch Linux System with desktop en

  • Transform XML using XSL, output XML

    Hi all, I have an xml document and I want to transform it using an xsl file. As a result I want an xml document, it's possible? Anyone could help me?